22 matches found
CVE-2026-12938
creationtimestamp| type| source ---|---|--- 2026-07-29 02:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvss2neh2b...
CVE-2019-12938
The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffective with nginx. Attackers can read logs via the webmail/logs/sendmail URI...
CVE-2025-12938
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2024-12938
A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The...
CVE-2024-12938
creationtimestamp| type| source ---|---|--- 2024-12-26 06:01:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113717603134015061 2024-12-26 06:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6t4tadq222 2024-12-26 08:12:35+00:00| seen|...
CVE-2024-12938 code-projects Simple Admin Panel updateOrderStatus.php sql injection
A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The...
CVE-2020-12938
CVE-2020-12938 is rejected/not used per the Initial Description.
SUSE: Security Advisory (SUSE-SU-2021:2834-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-12938
The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffective with nginx. Attackers can read logs via the webmail/logs/sendmail URI...
CVE-2019-12938
The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffective with nginx. Attackers can read logs via the webmail/logs/sendmail URI...
CVE-2019-12938
The CVE-2019-12938 entry concerns Analogic Poste.io 2.1.6, specifically the Roundcube component. The root issue is that .htaccess protection used to guard the logs/ folder is effective with Apache but not with nginx, enabling attackers to access logs through the webmail/logs/sendmail URI. Red Hat...
CVE-2018-12938
creationtimestamp| type| source ---|---|--- 2018-07-11 17:10:04+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4091...
Adobe Acrobat and Reader Heap Overflow Vulnerability (CNVD-2018-12938)
Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a heap overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...
OpenSLP 2.0.0 - Double-Free
OpenSLP 2.0.0 - Double-Free ''' | | | | | | | || | | | | -| | . | . | | . | . | | | . | | -| | | | -| -| ||| || ||||||| || || ||| || 2018-06-28 SLPD DOUBLE FREE ================ CVE-2018-12938 An issue was found in openslp-2.0.0 that can be used to induce a double free bug or memory corruption by...
OpenSLP 2.0.0 - Double-Free
''' | | | | | | | || | | | | -| | . | . | | . | . | | | . | | -| | | | -| -| ||| || ||||||| || || ||| || 2018-06-28 SLPD DOUBLE FREE ================ CVE-2018-12938 An issue was found in openslp-2.0.0 that can be used to induce a double free bug or memory corruption by corrupting glibc's...
CVE-2018-12938
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17833. Reason: This candidate is a duplicate of CVE-2017-17833. Notes: All CVE users should reference CVE-2017-17833 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
SUSE SLES11 Security Update : unrar (SUSE-SU-2018:0862-1)
This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed : - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...
